MHMR PURCHASING DEPARTMENT December 21, 2015 BID NO MICROSOFT ADS/ EXCHANGE SERVICES QUESTIONS AND ANSWERS

Transcription

1 MHMR PURCHASING DEPARTMENT December 21, 2015 BID NO QUESTIONS AND ANSWERS QUESTION 1: Does the Project Manager need to be a U.S. Citizen? Response 1: Project Manager must be available to assist MHMR during United States Central Standard Time. The Project Manager must obtain any pre-authorization to enter United States when required. They must be fluent in speaking and reading English. QUESTION 2: Why are you doing this ads project with an outside vendor? Response 2: To bring expertise, experience and augment resources of MHMRTC Staff for the ADS/Exchange migration. QUESTION 3: Will there be access to the full production environment? Response 3: Access will be provided to accomplish the project, so yes the contractor would have elevated privileges. QUESTION 4: What is your anticipated time frame to complete the job? Response 4: Expect that the contractor would be able to establish the duration in the response. QUESTION 5: What is the scope for remote access? Response 5: Very little remote access will be provided, contractor engineering staff is expected to be on property for 90+% of the work effort. QUESTION 6: Can we get a copy of the diagrams? Response 6: Yes, See attached. MICROSOFT ADS/ EXCHANGE SERVICES QUESTION 7: What type of training are you expecting? Response 7: MHMRTC resources will be working with the contractor and picking up usage during the project. Training is really about new functionality or features that have been added or changed since the current version of ADS 2008 and Exchange 2007 that we would like to review and be shown. This is not a formal class room activity. QUESTION 8: Will GOOD need to be updated on the mobile devices? Response 8: I would expect that GOOD upgrade would have some impact on the end user

2 devices. This should be vetted and advised by the contractor. QUESTION 9: How many GOOD devices are there? Response 9: Approximately 920 GOOD devices. QUESTION 10: Should update to Version 6.0 of VSphere be included as recommendation? Response 10: MHMR will perform update to 6.0 if this is the recommended/required by vendor. QUESTION 11: What type of end user support do you want? Response 11: For ADS and Exchange we would rely on our internal helpdesk to support the end users. It is possible we would want to augment our staff for the GOOD upgrade, and the vendor should include an option for hours and rate. QUESTION 12: What are the plans for the certificate authenticity server? Response 12: We will need to migrate the server to a new system, and maintain the certificates currently issued. QUESTION 13: How does the travel expensing need to be broken out? Response 13: Travel should be included in the proposal. Flat rate. QUESTION 14: Is GOOD Dynamic optional? Response 14: Yes, GOOD Dynamic is optional. QUESTION 15: What is the backup for the ? Response 15: CommVault is the backup for . QUESTION 16: What is the fax server? Response 16: The fax server is GFI Fax Maker. QUESTION 17: Does the archive need to be migrated? Response 17: No, the archive will not need to be migrated. QUESTION 18: What is MHMR s experience with GOOD? Response 18: Installation and operation of GOOD is a skill set MHMR staff has, but the resource will only have limited availability for the project as a technical resource. We are expect the vendor to be able to provide the skilled resource in GOOD product line. QUESTION 19: What resources are to be used and do you need an expert in GOOD? Response 19: Vendor is responsible for the GOOD migration. QUESTION 20: TX Domain - Please provide list of Objects a. What other objects reside in TX Domain? b. Domain Controller(s), DNS, DHCP, File, App Servers? c. Security groups? Security/Delegation objects? d. Quantity of Trust relationships and types? Bi-directional? One-Way? e. Is upgrade of all domains to Windows 2012 R2 part of the requirement?

3 f. Forest/Domain functional mode upgrade? g. Can you provide Domain/UPN information, per domain? h. Are user profile preservation needed for the users of the TX domain? i. Who is responsible to identify workstations/servers/file/apps that are used by TX users? j. Who's responsibility for workstation/server/file/app add/modify/removal ACL/rights adjustments? k. Who's responsibility for unresolvable ACL/rights adjustments (post TX domain demise)? Response 20: a. Computer objects, groups, group polices, trust. No User Objects. b. Domain Controllers, DNS, No DHCP, File Servers, SQL, and App Servers, and ISA FW. c. It is possible that MHMRTC will maintain the trust relationship to this domain, as the phase out of the domain may not occur until late But DNS, Time and other top tier services will be moved to TC domain. Yes, there are security groups between the trusted domains. d. Three Trust relationships exist; trust relationships exist in both one-way to CU and DMZ and bi-directional TC to TX between the domain. e. TC, CU and DMZ AD will be upgraded to 2012 R2; TX will not be upgraded. f. Functional mode is 2008 R2 g. Details of the technical naming convention will be provided upon award of RFP. h. There are no user accounts, only service and administration accounts. i. TX will not be decommissioned as part of this project. Just the relocation of top Tier services such as the trust relationships, DNS, Time, etc. j. In reference to TX, as the domain is not decommissioned at the end of the project. MHMRTC will be handling the decommission of the TX domain. Other domains will be the vendor s responsibility. k. MHMRTC will be handling the decommissioning of TX domain. QUESTION KMS a. Please list all KMS Licensing, as some older items may not be supported upon new 2012r2 servers. b. Please list Terminal Server Licensing versions. Response 21: a. Windows 7, Windows 10, Office 2010 and later, Project 2013 and later, Visio 2013 and later, Windows Servers 2008 and later are the primary licenses. Specify what versions are not compatible with the latest version of KMS in the RFP response. b. TS 2008 R2. QUESTION 22: a. Is there currently a GPO ADMX central store defined? b. Is KIX or login scripts still in use? c. Is there a desire for a discussion on GPO targeting/scoping techniques? Response 22: a. Yes, there is a defined GPO ADMX central store.

4 b. VBS login scripts are still used. c. MHMR uses both OU and groups to target GPO. MHMR is interested in moving toward the preference section of GPO and where functionality could be leveraged. QUESTION 23: a. Will you provide list of supported domains? b. What will happen to archive mail currently in the Single Message Solutions Enterprise Archive Server? c. Is the expectation to migrate archives to CommVault? d. Or will this solution be maintained, without migration or conversion? e. Assumption: Archive is moving to CommVault, however, question on "old" archive items location? Response 23: a. There are about 10 domain names currently in the system; 99.9% of all mail flows through mhmrtc.org domain. Exact names will be provided once the RFP has been awarded. b. Message solutions archive system will be only be accessible to the end users via Web page and will be exists for approximately two years. MHMT will migrate to a new archive solution that is integrated with the backup solution in the future. c. No, MHMR will not migrate the archive to the new system. d. Solution will be maintained until is purged via company policies. e. All is located on premises and currently 100% is on the Message solution product. QUESTION 24: 3.2 a. Is the new Exchange environment interest upon version 2013 or 2016? b. Will the Exchange servers be located in the same physical location or multiple physical locations? c. Will the configuration of the new GOOD client upon your devices be your responsibility? d. Will you be creating, configuring the GOOD, Office Web App, and Fax Machine servers? e. Are these servers Physical or Virtual? f. Can you provide details on Storage environment that will be in use on this project? g. What type of public certificate is currently configured on Exchange? (SAN/UC, Wildcard, SingleCN) h. Will Outlook 2013 client replacement be your responsibility? i. Will workstation/client support be needed during this project (next day support or extended user support)? Response 24: a is the version schedule to be installed. b. Exchange servers will be at the same location. c. At this time, it is unclear to us if the EU GOOD Client will need updates. Outline in RFP response what will be needed and include an option for supplemental

5 Helpdesk staff if MHMRTC requires the additional support. d. Fax Server MHMR will assist with reconnecting the mail flow GOOD the vendor will be responsible Office Web App the vendor will be responsible e. The servers will be Virtual. f. The storage environment is fiber channel connected to dual FC switches, with a Compellent SAN for storage. g. Unified Communications is current public certification configured for Exchange. h. We will not be updating from outlook 2010 to 2013 at this time. Is this something that will be required? i. We are looking to the vendor to provide any details, if this is something you have experienced or recommend, explain and put it down as optional. QUESTION 25: a. Please confirm that the TrendMicro product is ScanMail Suite for Microsoft Exchange. b. Assumption: Sophos server is being used as a border/gateway device, not an antispam device. c. Assumption: current GOOD environment is not "..tied into.." New Exchange environment, as it had been stated the GOOD environment will be a new environment. d. Please quantify "20%" of the mailbox moves. Assuming 480 mailboxes and 640GB based upon Approx mailboxes and 3.2TB data? e. Please explain load balancer "Pre-authentication" f. Assumption: Barracuda Load Balancer HA = Active/Passive configuration g. Will OWA, OA, and ActiveSync be available to external connected devices? h. Comment: Seems to defeat the MDM methods provided by GOOD on IOS, Android, Windows 8 and above. i. Is OA and ActiveSync for external use on corporate/non-corporate Windows XP/7 Devices? j. Assumption: OWA for external/kiosk functionality k. How about internal use? Response 25: a. Yes, it is ScanMail. b. Yes it does encryption, anti-spam function. It processes all in bound and out bound mail for the agency. c. GOOD environment will be a new build, Migration of connections is unknown as to supportability or process from the manufacture, and vendor needs to make a recommendation. d. 20% is an estimate to allow for the validation of configuring the required mail stores, that there is a valid PowerShell scripts or other tools are built to move all the mailboxes, allow for testing and validation of system configuration. This is less about exact mailbox or disk space quantities. e. As the load balancer will be accessible to the Outside world for OWA access, the authentication will occur on the load balancer and relayed to the Exchange servers,

6 so that there is another layer of security between the servers and the internet traffic. f. Yes, HA configured. g. Yes to all three. h. Some users will need the OWA, OA, Active Sync interfaces, while others will be required to use the GOOD platform. i. Yes, OA and ActiveSync are for external use on corporate/non-corporate devices. j. OWA is external use. k. OWA is available internally and externally. QUESTION 26: Assumption: During the Pre Bid conference it was mentioned GOOD would be stood up as a new environment to the new Exchange. a. Who is responsible for configuration of the new GOOD environment? b. Will the configuration of the new GOOD client upon your devices be your responsibility? c. Can you provide current and future versions for the GOOD environment? d. Note per GOOD: There is no option to upgrade to GOOD Mobile Messaging Server v8.3.1 from versions earlier than v8.0 in this release. e. What type of public certificate is currently configured on GOOD? (SAN/UC, Wildcard, SingleCN) Response 26: a. Vendor is responsible for configuration of new GOOD environment. b. At this time we are assuming that migration of GOOD to the new servers will not impact the clients directly. If this is not the case, and devices will need a new installation, then include an option for supporting this effort by supplementing our helpdesk staff, with and explanation regarding what the impact may be. c. We do maintain software maintenance on the GOOD platform d. Current version of GOOD Mobile Messaging is e. Wildcard is current public certification configuration. QUESTION 27: 3.5 NOTE: the "..approximately another two (2) weeks of effort.." seems very aggressive, given 80% is approximately 1900 users. Pilot of the migration should provide timeframe clarity. Response 27: Yes, the pilot will clarify the time line.

7 TWO WAY TRUST Active Directory

8

9 CURRENT EXCHANGE ENVIRONMENT

10